Bump the pip-ci group across 1 directory with 3 updates

[dependabot]

Bumps the pip-ci group with 3 updates in the /tests/ci directory: aws-cdk-lib, constructs and boto3.

Updates aws-cdk-lib from 2.255.0 to 2.262.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.262.1

Bug Fixes

• core: bump @aws/cloudformation-validate to 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380
• core: env CDK_VALIDATION=false does not disable built-in template validation (#38379) (cc4208c), closes #38378

---

Alpha modules (2.262.1-alpha.0)

v2.262.0

Features

• ecs: add support ECS-optimized Amazon Linux 2023 (Neuron) AMI (#34689) (ad665c4)
• mediaconnect: l2 construct (#37945) (8e9e001)
• update L1 CloudFormation resource definitions (#38275) (2b1c632)
• apigateway: alb integration (#36247) (20dbdd9), closes #36184
• bedrockagentcore: support service/region in IAM credential provider for gateway targets (#37697) (08a2543), closes #37696
• cloudfront: add Managed-HostHeaderOnly origin request policy (#38236) (0e66e47), closes #38234
• core: templates are validated against a comprehensive default rule set (#38135) (023c5bf)

Bug Fixes

• cross-stack warnings are emitted for nested stacks (#38355) (db98909)
• apigateway: revert alb integration that breaks jsii go packaging (#38305) (18158a4), closes #36247 #36247 #36247 #36247
• aws-cdk-lib: fatal validations don't show plugin name (#38273) (a88d1ba)
• aws-cdk-lib: validation namespaces for annotations are inconsistent (#38256) (75893d9)
• backup: lifecycle and vault lock validations reject tokenized durations (#38264) (0ff20a3), closes #38263 #38246 #37751 #25943 #38246 #37751 #25943
• certificatemanager: use hasOwnProperty in apexDomain to prevent prototype collision (#37195) (ec38947), closes #37193
• cloudfront-origins: validate httpPort and httpsPort range in HttpOrigin (#37872) (8a62b58)
• core: stack-related validation has an empty construct path (#38350) (0af7c34)
• core: stack.node.addDependency gets slower as stacks grow (#38314) (0728618)
• core: synth crashes with EISDIR on a symlink-to-directory when a validation plugin is registered (#38299) (be0fdc4), closes #38295
• elasticloadbalancingv2: improve handling for dropInvalidHeaderFields in case of default or switching from true to false (#36483) (208b9db), closes #36409
• lambda: allow SnapStart for container image functions (#38265) (586dc4f), closes #30898
• lambda: validations reject tokenized provisioned concurrency and async invoke config values (#38246) (4aa7e78), closes #38245 #37197 #36275 #37197
• opensearchservice: allow gp3 ebs throughput up to 2000 MiB/s (#38001) (f0cfc5b), closes #38000 #36074
• spec2cdk: add IVS to event pattern method name prefixes (#38322) (d6d1e8d)
• validation: incorrectly relative paths in Cloud Assemblies (#38352) (3f9422f), closes #38333
• validation: validation reports are not self-contained (#38333) (5d11d70)

Reverts

• lambda: revert SnapStart for container image functions (#38265) (#38281) (3b92863)

---

Alpha modules (2.262.0-alpha.0)

Bug Fixes

• redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.263.0-alpha.0 (2026-07-31)

⚠ BREAKING CHANGES

• mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

Bug Fixes

• glue-alpha: race condition when creating mutiple indices (#38016) (18b1947), closes #24813 #34 #34
• mediaconnect: jsdoc typo (#38434) (7fe6d3d)
• mediaconnect: remove default removal policy (#38437) (238193d)

2.262.2-alpha.0 (2026-07-29)

2.262.1-alpha.0 (2026-07-23)

2.262.0-alpha.0 (2026-07-22)

Bug Fixes

• redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)

2.261.0-alpha.0 (2026-07-02)

Features

• metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

2.260.0-alpha.0 (2026-06-16)

2.259.0-alpha.0 (2026-06-11)

2.258.1-alpha.0 (2026-06-08)

2.258.0-alpha.0 (2026-06-04)

Features

• integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

Bug Fixes

... (truncated)

Commits

• d0c6dba chore(release): v2.262.1 (#38393)
• 5448b83 chore(release): 2.262.1
• d409b96 fix(core): bump @aws/cloudformation-validate to 1.5.1-beta to fix install o...
• cc4208c fix(core): env CDK_VALIDATION=false does not disable built-in template valida...
• 7275a1e chore(release): 2.262.0 (#38370)
• dd8ac9f Merge remote-tracking branch 'origin/v2-release' into bump/2.262.0
• 7e00626 chore(release): 2.262.0
• db98909 fix: cross-stack warnings are emitted for nested stacks (#38355)
• 031918c chore(repo): add workflow to track beginning-contributor PRs needing CI appro...
• 3f9422f fix(validation): incorrectly relative paths in Cloud Assemblies (#38352)
• Additional commits viewable in compare view

Updates constructs from 10.6.0 to 10.7.1

Release notes

Sourced from constructs's releases.

v10.7.1

10.7.1 (2026-07-20)

Bug Fixes

• Node.path takes a lot of time on deep construct trees (#2873) (857a94f)

v10.7.0

10.7.0 (2026-07-15)

Features

• removeDependency (#2872) (67495a0)

Commits

• 857a94f fix: Node.path takes a lot of time on deep construct trees (#2873)
• 67495a0 feat: removeDependency (#2872)
• 34b862f chore(deps): upgrade dev dependencies (#2871)
• 9b63ef8 chore(deps): upgrade dev dependencies (#2870)
• 1ec88fd chore(deps): upgrade dev dependencies (#2869)
• 710fe27 chore(deps): upgrade dev dependencies (#2868)
• 0ac4c4b chore(deps): upgrade dev dependencies (#2867)
• 9c52873 chore: remove Dockerfile (#2866)
• 8278842 chore(deps): upgrade dev dependencies (#2865)
• da65786 chore(deps): upgrade dev dependencies (#2864)
• Additional commits viewable in compare view

Updates boto3 from 1.42.97 to 1.43.57

Commits

• 7b06b40 Merge branch 'release-1.43.57'
• f5fdd1c Bumping version to 1.43.57
• 6af728c Add changelog entries from botocore
• 72a153d Merge branch 'release-1.43.56'
• 5092de5 Merge branch 'release-1.43.56' into develop
• b1b9ff3 Bumping version to 1.43.56
• c7d2f6e Add changelog entries from botocore
• 2a09bb6 Merge branch 'release-1.43.55'
• cad396b Merge branch 'release-1.43.55' into develop
• ffe76ba Bumping version to 1.43.55
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions